auth fix + css refactor